The core of anti-injection cross-site attack in Webscan, 360webscan_php tutorial

The core of anti-injection cross-site attack in Webscan, 360webscan

//get intercept rule$getfilter= "\\<.+javascript:window\\[.{ 1}\\\\x|<.*= (&#\\d+?;?) +?>|<.* (DATA|SRC) =data:text\\/html.*>|\\b (alert\\ (|confirm\\ (|expression\\ (|prompt\\ (|benchmark\s*?\\ (\d+?| Sleep\s*?\\ ([\d\.] +?\\) |load_file\s*?\\ () |<[a-z]+?\\b[^>]*?\\bon ([A-z]{4,}) \s*?=|^\\+\\/v (8|9) |\\b (and|or) \\b\\s*? (\ \ \ \ \ \ \ \ \\d]+?=[\\ (\ \) ' \ "\\d]+?| [\ \ \ \ \ \ \ a-za-z]+?=[\\ (\ \) ' \ ' a-za-z]+?| >|<|\s+? [\\w]+?\\s+?\\bin\\b\\s*?\ (|\\blike\\b\\s+?[ \ "']) |\\/\\*.+?\\*\\/|<\\s*script\\b|\\bexec\\b| Union.+? SELECT (\ \ +\\) |\\s+?. +?)| UPDATE (\ \ +\\) |\\s+?. +?) Set| Insert\\s+into.+? values| (select| DELETE) (\ \ (. +\\) |\\s+?. +?\\s+?) From (\ \ (. +\\) |\\s+?. +?)| (create| alter| drop| TRUNCATE) \\s+ (table| DATABASE) ";//Post interception rules$postfilter= "<.*= (&#\\d+?;?) +?>|<.*data=data:text\\/html.*>|\\b (alert\\ (|confirm\\ (|expression\\ (|prompt\\ (|benchmark\s*?\\) (\d+?| Sleep\s*?\\ ([\d\.] +?\\) |load_file\s*?\\ () |<[^>]*?\\b (onerror|onmousemove|onload|onclick|onmouseover) \\b|\\b (and|or) \\b\\s* ? (\ \ \ \ \ \ \ \ \\d]+?=[\\ (\ \) ' \ "\\d]+?| [\ \ \ \ \ \ \ a-za-z]+?=[\\ (\ \) ' \ ' a-za-z]+?| >|<|\s+? [\\w]+?\\s+?\\bin\\b\\s*?\ (|\\blike\\b\\s+?[ \ "']) |\\/\\*.+?\\*\\/|<\\s*script\\b|\\bexec\\b| Union.+? SELECT (\ \ +\\) |\\s+?. +?)| UPDATE (\ \ +\\) |\\s+?. +?) Set| Insert\\s+into.+? values| (select| DELETE) (\ \ (. +\\) |\\s+?. +?\\s+?) From (\ \ (. +\\) |\\s+?. +?)| (create| alter| drop| TRUNCATE) \\s+ (table| DATABASE) ";//Cookie Blocking Rules$cookiefilter= "Benchmark\s*?\\ (\d+?| Sleep\s*?\\ ([\d\.] +?\\) |load_file\s*?\\ (|\\b (and|or) \\b\\s*? ( [\ \ \ \ \ \ \ \\d]+?=[\\ (\ \) ' \ ' \\d]+?| [\ \ \ \ \ \ \ a-za-z]+?=[\\ (\ \) ' \ ' a-za-z]+?| >|<|\s+? [\\w]+?\\s+?\\bin\\b\\s*?\ (|\\blike\\b\\s+?[ \ "']) |\\/\\*.+?\\*\\/|<\\s*script\\b|\\bexec\\b| Union.+? SELECT (\ \ +\\) |\\s+?. +?)| UPDATE (\ \ +\\) |\\s+?. +?) Set| Insert\\s+into.+? values| (select| DELETE) (\ \ (. +\\) |\\s+?. +?\\s+?) From (\ \ (. +\\) |\\s+?. +?)| (create| alter| drop| TRUNCATE) \\s+ (table| DATABASE) ";

Not much to say.

I'm using the 360 security monitoring website to conclude that a cross-site Scripting Attack Vulnerability Remedy is to filter user-entered metadata

Hello friend This indicates that your site has a problem, suggest you go to the site backstage set up, if there are problems, suggest you to 360 forum to post to ask staff there.

What is 360webscan?

webscan.360.cn/
Cough, as for the password .... I don't know if it's a dictionary attack.

http://www.bkjia.com/PHPjc/861534.html www.bkjia.com true http://www.bkjia.com/PHPjc/861534.html techarticle core of anti-injection cross-site attack in Webscan, 360webscan//get intercept rule $getfilter = "\\.+javascript:window\\[.{ 1}\\\\x|. *= (#\\d+?;?) +?|. * (DATA|SRC) =data:text\\/html.*|\\b (Ale ...

